[Bug 295485] zfs.ko
- Reply: bugzilla-noreply_a_freebsd.org: "[Bug 295485] block autoloading of zfs.ko"
- Reply: bugzilla-noreply_a_freebsd.org: "[Bug 295485] need a way to block zfs.ko from being autoloaded by tools like puppet and facter"
- Reply: bugzilla-noreply_a_freebsd.org: "[Bug 295485] need a way to block zfs.ko from being autoloaded by tools like puppet and facter"
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Thu, 21 May 2026 23:19:55 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=295485
Bug ID: 295485
Summary: zfs.ko
Product: Base System
Version: 15.0-STABLE
Hardware: amd64
OS: Any
Status: New
Severity: Affects Some People
Priority: ---
Component: kern
Assignee: bugs@FreeBSD.org
Reporter: freebsd@gushi.org
Possibly related to #270789
We need a way to block zfs.ko from being autoloaded by tools like puppet and
facter. This is a fairly large module and a recent CVE is exacerbated by
having this module loaded. We're also mostly a virtual machine shop, where the
benefits of zfs memory usage are not great.
At BSDCan last year, Allan Jude (who also works in a puppet shop) suggested
that a sysctl could be devised that could block this behavior.
--
You are receiving this mail because:
You are the assignee for the bug.